CVE-2025-13653

In the provided connected documents, CVE-2025-13653 affects Search Guard FLX versions 3.1.0 through 4.0.0 when enterprise modules are disabled. The issue allows authenticated users to issue specially crafted requests to read documents from data streams without the required privileges, leading to ...

CVE-2025-13653 Unauthorized access to documents in data streams with specially crafted requests

In Search Guard FLX versions from 3.1.0 up to 4.0.0 with enterprise modules being disabled, there exists an issue which allows authenticated users to use specially crafted requests to read documents from data streams without having the respective privileges...

CVE-2019-13653

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection issue 5 of 5...

CVE-2024-13653

creationtimestamp| type| source ---|---|--- 2025-02-12 04:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113989033129729285 2025-02-12 05:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6f33yg2a 2025-02-12 06:48:39+00:00| seen|...

CVE-2024-13653

CVE-2024-13653 affects ZoxPress (WordPress Theme) versions up to 2.12.0. A missing capability check in the backup_options function allows authenticated attackers with Subscriber-level access or higher to modify arbitrary options, enabling potential privilege escalation (e.g., changing the default...

CVE-2019-13653

creationtimestamp| type| source ---|---|--- 2024-01-27 10:16:17+00:00| seen| https://t.me/ctinow/174720...

CVE-2020-13653

Zimbra Collaboration Suite Webmail contains a cross-site scripting (XSS) vulnerability in versions before 8.8.15 Patch 11 and in 9.x before 9.0.0 Patch 4. The flaw allows an attacker to inject JavaScript into a user’s account name, which can be reflected and executed when changing an e‑mail signa...

CVE-2017-13653

...

CVE-2017-13653

CVE-2017-13653 is rejected/not used; this ID does not represent an active vulnerability entry.

CVE-2019-13653

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection issue 5 of 5...

CVE-2019-13653

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection issue 5 of 5...

CVE-2019-13653

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection issue 5 of 5...

CVE-2019-13653

The CVE-2019-13653 entry applies to TP-Link M7350 devices up to and including firmware 1.0.16 Build 181220 Rel.1116n. The vulnerability is a triggerPort OS Command Injection in TP-Link M7350, allowing execution of OS commands (root cause not explicitly detailed in provided documents). Connected s...

CVE-2018-13653

CVE-2018-13653 affects the ipshoots Ethereum token. The mintToken function in its smart contract contains an integer overflow that enables the contract owner to assign any balance value to any arbitrary user. This is the root cause described in the CVE details; no mitigation or patch details are ...